What is GHSA-36gf-vpj2-j42w?

GHSA-36gf-vpj2-j42w is a security advisory published by GitHub Security Advisories with Medium severity. Cross site scripting in Apache JSPWiki

Which CVE IDs does GHSA-36gf-vpj2-j42w cover?

GHSA-36gf-vpj2-j42w covers the following CVE IDs: CVE-2024-27136. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-36gf-vpj2-j42w?

GHSA-36gf-vpj2-j42w has a CVSS v3 base score of 6.3, published by GitHub Security Advisories.

Which products are affected by GHSA-36gf-vpj2-j42w?

GHSA-36gf-vpj2-j42w affects 1 product, including: maven/org.apache.jspwiki:jspwiki-main:\u003c 2.12.2.

GHSA-36gf-vpj2-j42wMediumCVSS 6.3

Cross site scripting in Apache JSPWiki

Vendor

GitHub Security Advisories

Published

June 24, 2024

Last Modified

March 20, 2025

🔗 CVE IDs covered (1)

CVE-2024-27136 →

📋 Description

XSS in Upload page in Apache JSPWiki 2.12.1 and priors allows the attacker to execute javascript in the victim's browser and get some sensitive information about the victim. Apache JSPWiki users should upgrade to 2.12.2 or later.

🎯 Affected products1

maven/org.apache.jspwiki:jspwiki-main:< 2.12.2

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2024-27136
https://jspwiki-wiki.apache.org/Wiki.jsp?page=CVE-2024-27136
https://lists.apache.org/thread/gfms8gbncqqkj52p861b8fnsypwsl1d5
http://www.openwall.com/lists/oss-security/2024/06/23/3
https://github.com/advisories/GHSA-36gf-vpj2-j42w